This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/eyfxir4celYRqkEqN9u9ZXZyyvE.roa File: eyfxir4celYRqkEqN9u9ZXZyyvE.roa (raw, json) Hash identifier: TpYHW8kkbLNP1kYFvWhIAxtw4T47bzBLZoFWCzyJtPI= Subject key identifier: 7B:27:F1:8A:BE:1C:7A:56:11:AA:41:2A:37:DB:BD:65:76:72:CA:F1 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82BC08C53D7954E11FD2D92151C456 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/eyfxir4celYRqkEqN9u9ZXZyyvE.roa Signing time: Fri 02 Jan 2026 16:20:32 +0000 ROA not before: Fri 02 Jan 2026 16:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 2a0b:7080:20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:bc:08:c5:3d:79:54:e1:1f:d2:d9:21:51:c4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b27f18abe1c7a5611aa412a37dbbd657672caf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:ce:52:30:99:1c:79:75:50:83:c2:29:d3: 60:30:c8:70:43:c9:ad:2c:e5:8b:c9:24:8d:1c:7d: 29:f4:e7:68:93:10:dc:6c:1b:8e:d7:af:dc:fe:e0: d7:f0:c7:07:4b:f6:ac:e8:f7:c4:9d:a3:2a:f4:1c: 2a:1e:54:c8:ea:74:6f:01:b3:3d:0b:b1:9e:ff:50: 52:0f:e4:de:58:6c:66:0f:69:79:4f:95:cf:7d:91: af:1a:b8:67:74:55:61:6d:da:47:ea:9e:3d:fc:06: 05:ab:58:90:e7:0e:8f:d5:28:42:60:7d:a2:60:f5: e8:11:df:13:2f:5c:37:cb:5b:23:0f:62:6e:ef:dd: 2a:57:5c:60:4b:a3:f1:6f:95:0a:6a:2e:a4:5c:44: c4:39:34:31:fb:22:25:d1:89:36:67:68:55:60:26: 86:63:91:ef:ad:af:6c:f6:23:4a:c0:fb:12:c2:42: 2e:bf:55:10:c6:5e:17:00:a3:b2:0d:bc:f4:46:19: b6:c6:f2:41:6c:75:b2:ed:ec:0a:79:0f:56:c0:1a: 30:d5:d7:75:72:3b:e4:56:c1:19:9c:eb:ea:92:8a: 84:e7:d4:7d:84:1d:5f:10:27:6d:2f:2a:6e:76:54: e5:c8:7e:99:91:06:04:67:03:f1:47:df:bc:d0:d9: 2c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:27:F1:8A:BE:1C:7A:56:11:AA:41:2A:37:DB:BD:65:76:72:CA:F1 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/eyfxir4celYRqkEqN9u9ZXZyyvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:7080:20::/44 Signature Algorithm: sha256WithRSAEncryption ce:e1:71:13:4f:50:1f:a6:f2:3f:69:92:04:da:62:4b:f3:c6: 0c:ec:bd:58:1c:49:1c:a9:da:00:72:4a:23:e8:84:9c:0f:07: 0b:73:5e:22:a9:23:19:8f:fc:af:74:98:54:05:2a:21:65:ed: f5:f7:af:ef:c0:36:2a:a1:c9:d3:47:f7:9c:8b:f5:d9:4f:03: 08:bc:a6:aa:e3:e2:31:e1:36:1d:26:8a:fe:91:00:37:62:d9: b6:13:7e:a4:7b:6e:8a:4b:3d:ac:6c:d7:a1:e8:35:3f:73:2b: 7d:a1:c9:fe:3d:bf:6b:32:30:13:78:66:1b:17:42:d7:9e:de: f7:8e:e4:06:96:58:e1:96:1a:f0:9c:4a:c0:bc:91:38:5f:78: 66:aa:2c:44:55:d8:5c:a4:98:84:ea:dc:30:b7:6f:99:9f:cc: ac:d9:4e:82:cd:1a:4f:af:16:3b:af:c0:9a:1c:d0:6b:08:24: e7:ad:4b:41:87:0c:26:8f:2c:a2:a0:41:65:1d:ca:3a:b1:ce: a1:8c:90:a2:d2:2c:9d:ed:b1:4e:0e:6b:34:40:a4:21:71:b7: 8c:0c:96:2b:d4:d0:71:6b:18:f2:45:5a:68:7c:83:44:49:f4: a7:f6:58:d3:13:be:63:fd:ef:07:a9:0d:9f:cb:0c:b6:4b:be: 3d:b2:0e:13 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/grwIxT15VOEf0tkhUcRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjI3ZjE4YWJlMWM3YTU2MTFhYTQxMmEzN2RiYmQ2NTc2NzJjYWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnirOUjCZHHl1UIPCKdNgMMhwQ8mt LOWLySSNHH0p9OdokxDcbBuO16/c/uDX8McHS/as6PfEnaMq9BwqHlTI6nRvAbM9 C7Ge/1BSD+TeWGxmD2l5T5XPfZGvGrhndFVhbdpH6p49/AYFq1iQ5w6P1ShCYH2i YPXoEd8TL1w3y1sjD2Ju790qV1xgS6Pxb5UKai6kXETEOTQx+yIl0Yk2Z2hVYCaG Y5Hvra9s9iNKwPsSwkIuv1UQxl4XAKOyDbz0Rhm2xvJBbHWy7ewKeQ9WwBow1dd1 cjvkVsEZnOvqkoqE59R9hB1fECdtLypudlTlyH6ZkQYEZwPxR9+80NksAwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHsn8Yq+HHpWEapBKjfbvWV2csrxMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvZXlmeGlyNGNlbFlScWtFcU45dTlaWFp5eXZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgtwgAAg MA0GCSqGSIb3DQEBCwUAA4IBAQDO4XETT1AfpvI/aZIE2mJL88YM7L1YHEkcqdoA ckoj6IScDwcLc14iqSMZj/yvdJhUBSohZe3196/vwDYqocnTR/eci/XZTwMIvKaq 4+Ix4TYdJor+kQA3Ytm2E36ke26KSz2sbNeh6DU/cyt9ocn+Pb9rMjATeGYbF0LX nt73juQGlljhlhrwnErAvJE4X3hmqixEVdhcpJiE6twwt2+Zn8ys2U6CzRpPrxY7 r8CaHNBrCCTnrUtBhwwmjyyioEFlHco6sc6hjJCi0iyd7bFODms0QKQhcbeMDJYr 1NBxaxjyRVpofINESfSn9ljTE75j/e8HqQ2fywy2S749sg4T -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:24 2026 by rpki-client